tracking-hiring-signals-from-company-tweets

SUSPICIOUS. The skill’s purpose and capabilities broadly align, and it talks to official Apify infrastructure, but it depends on a third-party actor and forwards `APIFY_TOKEN` to that service. The main concrete issue is credential handling via URL query string plus limited verifiability of the external actor and missing local helper script.